Refactor experiments to use a sandboxed API.
Move serialization inside the sandbox.
Upload results upon exit.
Let DNS resolver specify a resolver
Put serialization in the sandbox.